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Attributes of Transition States 



IPSec stack on both client and server systems 
Newly negotiated SA Updated in client system if 
there is successful completion of SA refresh 



IPSec stack not on client system 
Previously negotiated SA stored in client system is 
inhibited from being updated 

IPSec stack not on client system 
Previously negotiated SA stored in client system is 
inhibited from being updated 

IPSec stack not on client system 
Previously negotiated SA stored in client system is 

inhibited from being updated 

Client system does not have any security context 
Configuration option is provided for managing client 

system without security 



Client system is unmanageable by OS hung server 
system. 

Fault tolerant system is provided for switching 
control to secondary server system 



Server system does not have any security context 
Configuration option is provided for managing client 
system without security 

Neither system has any security context 
Configuration option is provided for allowing traffic 
to be communicated in the clear 



